This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft File: Ps7T04aszVVp_7F6tjE5um1Hteo.mft (raw, json) Hash identifier: e4tXZPpzIzvCofBFc/unAT4FN2snmDzxhU7vuDVsEkA= Subject key identifier: 8F:A5:06:FC:E7:D4:1C:70:9C:09:87:1D:47:B1:B6:DB:56:17:62:33 Authority key identifier: 3E:CE:D3:D3:86:AC:CD:55:69:FF:B1:7A:B6:31:39:BA:6D:47:B5:EA Certificate issuer: /CN=3eced3d386accd5569ffb17ab63139ba6d47b5ea Certificate serial: 019B59E39C6778624FFB6B4D1A33E2300780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps7T04aszVVp_7F6tjE5um1Hteo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft Manifest number: FA Signing time: Fri 26 Dec 2025 09:00:47 +0000 Manifest this update: Fri 26 Dec 2025 09:00:47 +0000 Manifest next update: Sat 27 Dec 2025 09:00:47 +0000 Files and hashes: 1: PpWQe7F60cQV0dh2AIuIGDWQfQM.roa (hash: TyQK8tYggX3AsMsFVzO7P3WPFl/RmPxqQqZ+a02rkMQ=) 2: Ps7T04aszVVp_7F6tjE5um1Hteo.crl (hash: 3Eh6qlSFBfaoNcbD5+BDk0fElS2vCxDH3prUyrhrff8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ps7T04aszVVp_7F6tjE5um1Hteo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:9c:67:78:62:4f:fb:6b:4d:1a:33:e2:30:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eced3d386accd5569ffb17ab63139ba6d47b5ea Validity Not Before: Dec 26 09:00:47 2025 GMT Not After : Dec 27 09:00:47 2025 GMT Subject: CN=8fa506fce7d41c709c09871d47b1b6db56176233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:66:cd:fa:45:de:5f:b3:5c:1a:75:b2:84: 38:69:00:3e:17:cd:d0:5d:90:e1:d1:d6:1c:03:a7: ef:42:0f:09:27:41:5c:06:41:03:35:ea:d4:7f:ee: ca:2a:ee:87:93:bf:67:56:5e:31:fd:18:48:44:e5: 5f:2d:a9:a4:c8:0d:a8:19:7f:24:46:4c:2e:16:d6: 8b:3a:87:4f:b6:1c:bb:09:08:9b:61:d5:8d:dc:b8: c0:37:bd:15:26:93:30:db:81:0e:3e:a1:21:5b:4c: 47:ff:46:27:21:9e:1a:8d:9f:28:af:35:77:96:90: d1:65:35:49:4e:08:c0:df:c5:3f:97:51:0f:e6:b4: 11:a1:db:8e:36:45:2a:54:04:19:45:64:46:cc:fb: 90:fd:d1:1f:7b:cb:5c:eb:fe:8f:90:1f:9a:1d:95: fa:34:13:4e:db:87:04:70:76:17:23:0a:64:1b:1b: 5d:c8:d2:e7:6e:ea:61:4f:46:54:40:f1:1d:11:3e: 72:fc:e6:81:32:14:7c:0d:76:07:b8:f1:d6:ce:67: 83:b4:be:fe:18:49:dd:d7:ed:a5:f3:47:53:2e:1a: 49:f5:a9:cc:2d:6b:86:2d:75:cf:fe:18:82:b9:1a: 17:1a:cc:83:89:4d:4f:a7:3a:81:2b:58:9d:04:0e: cc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A5:06:FC:E7:D4:1C:70:9C:09:87:1D:47:B1:B6:DB:56:17:62:33 X509v3 Authority Key Identifier: keyid:3E:CE:D3:D3:86:AC:CD:55:69:FF:B1:7A:B6:31:39:BA:6D:47:B5:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps7T04aszVVp_7F6tjE5um1Hteo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b2:1a:ad:f2:f8:e1:44:8b:4b:54:3c:04:2e:b1:fd:13:6b: 22:13:68:e5:8a:53:90:50:cf:bb:bf:a6:69:5d:a7:85:20:1a: ed:5a:57:c2:c2:ea:52:03:74:f3:f8:21:38:7f:b1:88:66:25: ff:ee:e0:89:dc:6d:f2:d2:f7:39:8b:77:8b:1c:0a:0c:49:b0: a2:51:56:20:fe:49:09:f7:ab:16:8c:1e:24:04:d2:62:96:31: 51:09:8c:51:5d:01:72:21:f6:34:ef:10:b8:cf:39:d8:d5:45: aa:59:a4:7e:29:de:a0:38:8f:61:6e:f1:74:22:a0:4e:f9:e3: 43:3d:9f:d2:8e:48:cd:6a:ef:d3:22:ff:38:1d:30:b9:60:00: a2:59:ef:54:47:ac:d6:b0:97:82:be:60:31:d3:d2:fa:15:13: ce:1a:8d:d6:ea:eb:16:7a:64:bd:9e:53:b0:9d:2b:9a:8d:27: 35:8b:7c:9d:34:20:93:cd:17:5f:5e:e2:4e:97:0e:13:56:ac: 0d:9d:b6:77:75:ca:2b:59:a4:a5:bf:bd:a5:ac:af:a5:0c:47: a2:3d:2c:0c:aa:c9:8b:6b:65:b2:03:52:51:2d:ca:eb:91:ab: 06:70:9f:85:74:b3:4b:94:4c:cc:ce:17:89:fd:c8:6d:ce:48: c6:24:92:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45xneGJP+2tNGjPiMAeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlY2VkM2QzODZhY2NkNTU2OWZmYjE3YWI2MzEzOWJhNmQ0 N2I1ZWEwHhcNMjUxMjI2MDkwMDQ3WhcNMjUxMjI3MDkwMDQ3WjAzMTEwLwYDVQQD Eyg4ZmE1MDZmY2U3ZDQxYzcwOWMwOTg3MWQ0N2IxYjZkYjU2MTc2MjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAridmzfpF3l+zXBp1soQ4aQA+F83Q XZDh0dYcA6fvQg8JJ0FcBkEDNerUf+7KKu6Hk79nVl4x/RhIROVfLamkyA2oGX8k RkwuFtaLOodPthy7CQibYdWN3LjAN70VJpMw24EOPqEhW0xH/0YnIZ4ajZ8orzV3 lpDRZTVJTgjA38U/l1EP5rQRoduONkUqVAQZRWRGzPuQ/dEfe8tc6/6PkB+aHZX6 NBNO24cEcHYXIwpkGxtdyNLnbuphT0ZUQPEdET5y/OaBMhR8DXYHuPHWzmeDtL7+ GEnd1+2l80dTLhpJ9anMLWuGLXXP/hiCuRoXGsyDiU1PpzqBK1idBA7M0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+lBvzn1BxwnAmHHUextttWF2IzMB8GA1UdIwQY MBaAFD7O09OGrM1Vaf+xerYxObptR7XqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHM3VDA0YXN6VlZwXzdGNnRqRTV1bTFIdGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80MmUxOWEtZTEzYS00OTk4LTk5YWUt ZWE5NjE5YmViNTZlLzEvUHM3VDA0YXN6VlZwXzdGNnRqRTV1bTFIdGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy80MmUxOWEtZTEzYS00OTk4LTk5YWUtZWE5NjE5YmViNTZl LzEvUHM3VDA0YXN6VlZwXzdGNnRqRTV1bTFIdGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7IarfL4 4USLS1Q8BC6x/RNrIhNo5YpTkFDPu7+maV2nhSAa7VpXwsLqUgN08/ghOH+xiGYl /+7gidxt8tL3OYt3ixwKDEmwolFWIP5JCferFoweJATSYpYxUQmMUV0BciH2NO8Q uM852NVFqlmkfineoDiPYW7xdCKgTvnjQz2f0o5IzWrv0yL/OB0wuWAAolnvVEes 1rCXgr5gMdPS+hUTzhqN1urrFnpkvZ5TsJ0rmo0nNYt8nTQgk80XX17iTpcOE1as DZ22d3XKK1mkpb+9payvpQxHoj0sDKrJi2tlsgNSUS3K65GrBnCfhXSzS5RMzM4X if3Ibc5IxiSSLA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:27 2025 by rpki-client